Replicate vulnerabilities
We track 1 vulnerability in Replicate products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 9, 2026.
1vulnerabilities
1critical
0high
0exploited
9.3average CVSS score
Latest Replicate vulnerabilities
- 9.3 Critical severity
cog: Server-Side Request Forgery
Replicate Cog through 0.23.1 contains a server-side request forgery vulnerability that allows attackers to cause the Cog process to make server-side HTTP requests by submitting prediction inputs with attacker-controlled URLs that are not validated against the